How do I know if I am affected by the Mays Housecall Home Health, Inc. data breach?

Mays Housecall Home Health, Inc. is mailing notification letters directly to affected individuals. If you have received care or services from Mays Housecall Home Health, Inc. (also operating as Mays Home Care (parent network)) in the period leading up to March 2026 and you have not received a letter, contact the entity directly. 5,208 individuals were confirmed affected in the HHS OCR filing.

What data was exposed in the Mays Housecall Home Health, Inc. breach?

According to the notification letter and supporting filings, the compromised data included: Full name (specific PHI categories not entity-confirmed), Likely Social Security number (per third-party aggregator), Likely date of birth, address, government ID, medical information, financial information (per third-party aggregator).

Was Mays Housecall Home Health, Inc. attacked by a ransomware group?

No threat actor has publicly claimed responsibility for the Mays Housecall Home Health, Inc. breach. The incident is categorized in the HHS OCR portal as a hacking.

Should I file a lawsuit over the Mays Housecall Home Health, Inc. data breach?

1 plaintiffs' firms have publicly announced investigations or filed complaints related to the Mays Housecall Home Health, Inc. breach: Shamis & Gentile P.A. (publicly investigating). We are not a law firm and cannot give legal advice; consult your own attorney to evaluate your options.

What is HealthConsent and how does it help with the Mays Housecall Home Health, Inc. breach?

HealthConsent is an independent health-data privacy service. We help affected individuals stop the ongoing flow of their health information by filing HIPAA restriction requests, FTC Health Breach Notification Rule deletion requests, and state-law deletion requests across providers, insurers, Health Information Exchanges, prescription networks, and data brokers. Credit monitoring offered by Mays Housecall Home Health, Inc. addresses identity-theft risk; HealthConsent addresses the longer-tail problem of your exposed health data continuing to be sold and shared by other entities downstream.

Active breach tracker Texas Disclosed March 21, 2026

Mays Housecall Home Health Data Breach 2026: 5,208 Texas Home-Health Patients Exposed. What To Do

Mays Housecall Home Health, Inc., part of the 30+-location Mays Home Care network across Texas, Oklahoma, and Kansas, disclosed in March 2026 a network intrusion exposing patient data for 5,208 home-health patients. No substitute notice posted on the entity's website. Limited public detail. Here is what to do.

You have options. Scroll for the exact action steps, what your provider’s response covers, and what your health data needs beyond credit monitoring.

By HealthConsent Editorial Last updated May 15, 2026 Sources & methodology

Timeline

Jan 1, 2026

Attacker gained access

Jan 1, 2026

Breach detected

Mar 21, 2026

Reported to HHS OCR

Jan 1, 2026

Attacker gained access

Jan 1, 2026

Breach detected

Mar 21, 2026

Reported to HHS OCR

Data exposed

High-risk identity

Enables financial + identity theft

Likely Social Security number (per third-party aggregator) Likely date of birth, address, government ID, medical information, financial information (per third-party aggregator)

Contact & insurance

Phishing + targeted scams

Full name (specific PHI categories not entity-confirmed)

Class actions filed by

These firms have publicly announced investigations. You may be eligible to join. We are not a law firm and cannot give legal advice.

Shamis & Gentile P.A. (publicly investigating)

If you received a letter

Your action plan, in five steps.

You have more rights than the notification letter explains. Each step below is a concrete thing you can do today. Full detail and timing in the sections that follow.

Accept credit monitoring

It’s the floor of the response. Take it.

Freeze your credit

Free at Equifax, Experian, TransUnion.

File IRS Form 14039

Prevent fraudulent tax return under your SSN.

Review your EOBs

Insurance statements catch medical identity theft early.

Stop the ongoing flow

Credit monitoring doesn’t cover your health records. HealthConsent does.

Jump to step 5: protect my health data

What happened

Mays Housecall Home Health, Inc. is a home health agency founded in 1978 and part of the Mays Home Care network, which operates 30+ locations across Texas, Oklahoma, and Kansas. Mays Housecall provides nursing, therapy, home health aide, and social worker visits. The Texas footprint includes Paris, TX.

Mays Housecall reported the incident to HHS OCR on March 21, 2026 — classified as a Hacking/IT Incident with 5,208 affected individuals. The specific discovery date and intrusion timeline have not been publicly disclosed. The storage location of the breached PHI (network server vs. email) is not confirmed in publicly indexed sources.

As of mid-May 2026, no substitute breach notice has been posted on the Mays Home Care website. Patients are directed to call 1-800-362-4992 for inquiries.

No ransomware group has publicly claimed responsibility. No leak-site listing has been observed.

What was potentially exposed

The entity has not publicly enumerated the specific PHI categories. Third-party aggregator Claim Depot lists the following as potentially involved (not entity-confirmed):

Full name
Social Security number
Date of birth
Address
Government IDs
Medical information
Financial information

If you receive a Mays Housecall notification letter, it will list the specific data elements involved in your case.

Home-health context

Home health agencies hold an unusually rich PHI set — Medicare and Medicaid IDs, OASIS assessments, in-home clinical notes, caregiver schedules, and often Social Security numbers collected for payer enrollment. Smaller home-health agencies frequently lack dedicated security staffing, and OCR Hacking/IT Incident filings against this sector have been rising in 2024-2026.

What to do

Call Mays Housecall at 1-800-362-4992 and ask whether they have mailed a substitute notice and what credit monitoring (if any) is offered.
Place free credit freezes at Equifax, Experian, TransUnion as a baseline precaution.
Watch your Medicare Summary Notice for unfamiliar home-health claims.
If you are a family member or guardian of a Mays Housecall patient (elderly, disabled, medically vulnerable), monitor their statements on their behalf.
Stop the ongoing flow of your home-health data. HealthConsent files HIPAA restriction requests across home-health, hospice, and prescription networks.

Continue reading

Stop your data from spreading further

Credit monitoring covers your wallet. HealthConsent covers your health records.

Your stolen diagnoses, test results, and medical record numbers don’t expire when the free credit-monitoring window ends. HealthConsent automates HIPAA restriction requests and opt-outs across providers, insurers, HIEs, and prescription networks so the data taken in this breach can’t keep being shared and sold by other entities downstream.

Protect my health data

Cancel anytime · Family plan covers spouses + dependents

Sources & further reading

Official HHS OCR Breach Portal: ocrportal.hhs.gov

About this page

This page is compiled from public regulatory filings, the breached entity’s own disclosures, and reporting from established healthcare-privacy outlets. Some sections are assembled with the help of automated research and may contain errors, summaries that lag the underlying source, or details that have since been revised. Treat it as a starting point, not legal advice or an authoritative record. If you spot something inaccurate, the linked sources above are the canonical record. For questions about your individual situation, contact the breached entity directly or consult a licensed attorney.